DeutschShown in its original language — a full translation is planned for a future version.
Oracle Communications Applications: Mehrere Schwachstellen
view advisory published 2019-04-16
Ein Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
describes (52)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-12404US | medium5.9 | — | ||
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack… | ||||
| CVE-2018-12384US | medium5.9 | — | ||
When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the C… | ||||
| CVE-2019-3823US | high7.5 | — | ||
libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp… | ||||
| CVE-2019-3822US | critical9.8 | — | ||
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_cre… | ||||
| CVE-2018-16890US | high7.5 | Exploit | ||
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_… | ||||
| CVE-2018-16865US | high7.8 | — | ||
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the jou… | ||||
| CVE-2018-16864US | high7.8 | — | ||
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line… | ||||
| CVE-2018-0734US | medium5.9OT elevated | — | ||
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the privat… | ||||
| CVE-2018-11784US | medium4.3 | Exploit | ||
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the… | ||||
| CVE-2018-3646US | medium5.6 | — | ||
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker… | ||||
| CVE-2018-3620US | medium5.6 | — | ||
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker… | ||||
| CVE-2018-10901US | high7.8 | — | ||
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupt… | ||||
| CVE-2018-3693US | medium5.6 | — | ||
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a spec… | ||||
| CVE-2018-1000613US | critical9.8 | — | ||
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Cl… | ||||
| CVE-2018-11040US | high7.5 | — | ||
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON wi… | ||||
| CVE-2018-11039US | medium5.9 | — | ||
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTT… | ||||
| CVE-2018-11219US | critical9.8 | — | ||
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bound… | ||||
| CVE-2018-11218US | critical9.8 | Exploit | ||
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overfl… | ||||
| CVE-2018-0732US | high7.5 | — | ||
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an u… | ||||
| CVE-2018-1000180US | high7.5OT elevated | — | ||
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-l… | ||||
showing 20 of 52
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan